cve-2024-21626

CVE-2024-21626 Overview This repository contains code examples for an app vulnerable to CVE-2024-21626 as well as an eBPF gadget to detect exploitation attempts. This repoistory was created as part of this blog post. The gadget program used to detect this vulnerability is for demonstration purpos...

CVE-2024-21626-POC

CVE-2024-21626-PoC Usage Instructions For educational/research purposes only. Any use unrelated to education/research is at your own risk. Usage docker build . -t cve-2024-21626 docker run -it --rm cve-2024-21626 bash /poc.sh 另起一个terminal /bin/bash.copy Note The specific file descriptors used var...

cve-2024-21626-runc-1.1.11-escape

CVE-2024-21626 - runc Leaky Vessels Overview Field| Detail ---|--- CVE| CVE-2024-21626 Affected Component| runc ≤ 1.1.11 Vulnerability Class| Container escape via file descriptor leak Nickname| Leaky Vessels Root Cause runc leaks an internal file descriptor typically fd/7 pointing to the host...

OPENSUSE-SU-2026:22009-1 Security update for jline3

This update for jline3 fixes the following issue: Update to upstream version 3.30.17: Security Fixes + Native Stack Buffer Overflow in Public INPUTRECORD.memmove JNI Method Windows GHSA-6r3w-6jpj-x5w6 + Authenticated SSH Shell Channel Resource Leak via Null or Non-Numeric PTY Dimensions...

Rocky Linux 8 [CIQ] Security Update: libslirp / libslirp-debuginfo / libslirp-debugsource / etc (crlsa-2024_0752)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20240752 advisory. runc: file descriptor leak CVE-2024-21626 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Nessus has not...

Rocky Linux 8 [CIQ] Security Update: polkit / polkit-debuginfo / polkit-debugsource / polkit-devel / etc (crlsa-2022_1546)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20221546 advisory. polkit: file descriptor leak allows an unprivileged user to cause a crash CVE-2021-4115 Tenable has extracted the preceding description block directly from the CIQ...

CVE-2026-97983

A flaw was found in the Linux kernel's VDUSE vDPA Device in Userspace subsystem. A local user can cause a Denial of Service DoS by issuing specific 32-bit compatibility input/output control ioctl requests. Due to improper command dispatching, successful requests allocate file descriptors but retu...

CVE-2026-97686

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file descriptors before terminating the calling application. Fixed in Version 26.09...

CVE-2026-97686

Wind River VxWorks 7 prior to version 26.09 is vulnerable to a memory resource leak. Specific system call arguments can cause the IPNET subsystem to fail to release allocated kernel memory and system file descriptors before the calling application terminates. This issue can lead to a high impact ...

EUVD-2026-88440

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file descriptors before terminating the calling application. Fixed in Version 26.09...

Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple Node.js modules

Summary IBM App Connect Enterprise Connector Discovery and OpenAPI Editor, IBM App Connect Enterprise Discovery Connectors and IBM App Connect Enterprise runtime are vulnerable to multiple vulnerabilities due to multiple Node.js modules. Vulnerability Details CVEID:CVE-2026-77037 DESCRIPTION:...

CVE-2026-97686: Missing Release of Resource after Effective Lifetime

Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in the IPNET subsystem failing to properly release allocated kernel memory and system file descriptors before terminating the calling application. Fixed in Version 26.09...

PT-2026-102326

Name of the Vulnerable Software and Affected Versions Wind River VxWorks 7 versions prior to 26.09 Description Specific system call arguments can cause the IPNET subsystem to fail to properly release allocated kernel memory and system file descriptors before the calling application is terminated...

CVE-2026-77037

A flaw was found in multer, a Node.js middleware for handling multipart/form-data. A remote attacker can exploit a file descriptor leak by sending repeated aborted or malformed multipart uploads. This can exhaust system resources, leading to a denial of service DoS for the affected application...

Linux Distros Unpatched Vulnerability : CVE-2026-77037

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - multer is a middleware for handling multipart/form-data in Node.js. In version 2.2.0, when a disk-backed upload is aborted or truncated before the write stream...

DEBIAN-CVE-2026-97983

In the Linux kernel, the following vulnerability has been resolved: vduse: return compat ioctl results directly The compat handler handles VDUSEIOTLBGETFD and VDUSEVQGETINFO, but then calls the native handler. Their different command sizes make native dispatch return -ENOIOCTLCMD. For GETFD, this...

EUVD-2026-67928

multer vulnerable to Denial of Service via file descriptor leak on aborted uploads...

NPM: multer vulnerable to Denial of Service via file descriptor leak on aborted uploads

NPM: multer vulnerable to Denial of Service via file descriptor leak on aborted uploads vulnerability discovered by ? in WordPress Npm multer versions 2.2.0...

GHSA-QFVM-CV95-JQJF multer vulnerable to Denial of Service via file descriptor leak on aborted uploads

Impact A vulnerability in multer 2.2.0 allows an attacker to trigger a Denial of Service DoS by aborting or truncating multipart uploads. When using diskStorage, the destination write stream is not closed if the upload is aborted before it finishes, so each failed request leaks an open file...

multer vulnerable to Denial of Service via file descriptor leak on aborted uploads

Impact A vulnerability in multer 2.2.0 allows an attacker to trigger a Denial of Service DoS by aborting or truncating multipart uploads. When using diskStorage, the destination write stream is not closed if the upload is aborted before it finishes, so each failed request leaks an open file...